glmcode 0.1.2 → 0.1.3

package/README.md

@@ -1,42 +1,50 @@
 # GLMCode
 
-A Node.js coding-agent CLI powered by Zhipu GLM. It is inspired by the workflow patterns of modern coding agents, but is an independent implementation and does not copy their code or branding.
+GLMCode 是一个 Node.js / npm 的 GLM Coding Agent，界面和交互以移动端 Python 原版 `glmcode.py` 为基础，同时提供文件工具、Shell、Skills、Plugins、MCP、Session 和模型切换。
 
-## Install
+## 安装
 
 ```bash
 npm install -g glmcode
 ```
 
-Then:
+npm 会自动安装 package.json 中声明的运行依赖；不需要手动 `pip install`，也不需要手动创建 PATH 脚本。npm 的全局 bin 会提供：
 
 ```bash
-glmcode auth login
 glmcode
+glm
+gc
 ```
 
-Or:
+三种启动命令。
+
+## 登录
 
 ```bash
-ZHIPU_API_KEY=your_key glmcode run "分析当前项目并修复测试失败的问题"
+glmcode auth login
 ```
 
-## Current features
+GLMCode 会尝试在手机、Linux、macOS、Windows 上打开智谱官方平台页面，并自动检测已有的 `ZHIPU_API_KEY` / `GLM_API_KEY` 或本地凭据。
+
+注意：智谱公开开发文档当前仍以“登录开放平台 → 创建 API Key → 使用 API Key 调用”为标准流程；普通网页登录并不会自动把 API Key 暴露给第三方 CLI。因此 GLMCode 不会伪造网页登录，也不会从浏览器 Cookie 中窃取凭据。
+
+## 依赖
+
+Python 原版需要 `requests` 与 `prompt_toolkit`，并使用 Python 标准库的 `zipfile`。Node 版对应为：
+
+- Node.js >= 18：内置 `fetch`、readline、child_process、fs 等能力
+- `adm-zip`：自动解压 `skills/*.zip` 技能包
+
+用户通过 npm 安装时这些 npm 依赖会自动安装。
+
+## 技能
 
-- Interactive terminal chat
-- GLM provider with streaming responses
-- Model switching and a configurable `freeModel` preset
-- API-key login/logout stored under `~/.glmcode`
-- Project instructions from `AGENTS.md`, `CLAUDE.md`, `.glmcode/INSTRUCTIONS.md`
-- Skills discovery from `.glmcode/skills/**/SKILL.md` and `~/.glmcode/skills/**/SKILL.md`
-- File read/write/list/search tools
-- Shell execution with `ask`, `auto`, or `deny` approval modes
-- Session persistence
-- Plugin discovery foundation
-- MCP server configuration and stdio launcher foundation
+支持：
 
-## Project config
+- `.glmcode/skills/**/SKILL.md`
+- `~/.glmcode/skills/**/SKILL.md`
+- `skills/*.zip` 自动解压
 
-Create `glmcode.json` in a project directory. Start from `glmcode.example.json`.
+## 启动界面
 
-> Note: this first release is a working foundation, not a claim of feature-for-feature parity with OpenCode. Remote MCP OAuth, LSP integration, subagents, TUI panels, GitHub automation, and a richer extension API are deliberately left for later iterations.
+保持 Python 原版的 GLM Logo、状态栏、`┃ 输入消息... ┃`、斜杠命令和技能补全风格。

package/package.json

@@ -1,13 +1,15 @@
 {
   "name": "glmcode",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "GLM Code · mobile coding agent with the GLM terminal UI, tools, skills, plugins and MCP.",
   "type": "module",
   "bin": {
-    "glmcode": "src/cli.js"
+    "glmcode": "src/cli.js",
+    "glm": "src/cli.js",
+    "gc": "src/cli.js"
   },
   "engines": {
-    "node": ">=20"
+    "node": ">=18"
   },
   "files": [
     "src",
@@ -29,5 +31,8 @@
     "skills",
     "plugins"
   ],
-  "license": "MIT"
+  "license": "MIT",
+  "dependencies": {
+    "adm-zip": "^0.5.16"
+  }
 }

package/src/auth.js

@@ -0,0 +1,58 @@
+import fs from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import { spawn } from 'node:child_process';
+import { AUTH_FILE, readJson, writeJson, getAuth } from './config.js';
+
+export const LOGIN_URL = 'https://open.bigmodel.cn/usercenter/apikeys';
+export const PLATFORM_URL = 'https://open.bigmodel.cn/';
+
+export async function openUrl(url) {
+  const attempts = process.platform === 'win32'
+    ? [['cmd', ['/c', 'start', '', url]]]
+    : process.platform === 'darwin'
+      ? [['open', [url]]]
+      : [['termux-open-url', [url]], ['xdg-open', [url]]];
+  for (const [cmd, args] of attempts) {
+    try {
+      const child = spawn(cmd, args, { detached: true, stdio: 'ignore' });
+      child.unref();
+      return true;
+    } catch {}
+  }
+  return false;
+}
+
+export async function detectApiKey() {
+  const candidates = [
+    process.env.ZHIPU_API_KEY,
+    process.env.GLM_API_KEY,
+    process.env.BIGMODEL_API_KEY,
+    await getAuth('zhipu')
+  ].filter(Boolean).map(x => String(x).trim()).filter(Boolean);
+  return candidates[0] || '';
+}
+
+export async function browserLogin() {
+  console.log('正在打开智谱 GLM 登录/API Key 页面...');
+  const opened = await openUrl(LOGIN_URL);
+  if (!opened) {
+    console.log(`请手动打开: ${LOGIN_URL}`);
+  }
+  console.log('');
+  console.log('登录说明：GLM 官方公开文档目前要求通过智谱开放平台创建 API Key。');
+  console.log('如果本机已有 ZHIPU_API_KEY / GLM_API_KEY，GLMCode 会自动检测并直接使用。');
+  console.log('浏览器登录本身不会把网页里的 API Key 自动暴露给第三方 CLI。');
+  console.log('');
+  const key = await detectApiKey();
+  if (key) {
+    console.log('检测到已有 API Key，正在使用已保存凭据。');
+    return key;
+  }
+  return '';
+}
+
+export async function authStatus() {
+  const key = await detectApiKey();
+  return { authenticated: Boolean(key), source: process.env.ZHIPU_API_KEY ? 'ZHIPU_API_KEY' : process.env.GLM_API_KEY ? 'GLM_API_KEY' : key ? 'local' : null };
+}

package/src/cli.js

@@ -7,9 +7,10 @@ import { ensureState, AUTH_FILE, GLOBAL_DIR, getProjectConfig, getAuth, saveAuth
 import { runAgent } from './agent.js';
 import { listMcp, saveMcpConfig } from './mcp.js';
 import { loadSkills, loadPlugins } from './skills.js';
+import { browserLogin, authStatus, LOGIN_URL } from './auth.js';
 
 await ensureState();
-const VERSION = '0.1.2';
+const VERSION = '0.1.3';
 const cwd0 = process.cwd();
 
 const C = { rst:'\x1b[0m', dim:'\x1b[2m', bold:'\x1b[1m', cya:'\x1b[36m', cyb:'\x1b[1;36m', grn:'\x1b[32m', yel:'\x1b[33m', red:'\x1b[31m', mag:'\x1b[35m', gry:'\x1b[90m' };
@@ -54,16 +55,22 @@ function printHelp(commands) {
 }
 
 async function authCmd(args) {
-  const sub = args[0] || 'list';
+  const sub = args[0] || 'status';
   if (sub === 'login') {
-    const key = await hiddenInput('API Key: ');
-    if (!key.trim()) throw new Error('Empty API key');
-    await saveAuth('zhipu', key.trim());
-    console.log(color(`已保存到 ${AUTH_FILE}`, C.grn));
+    const detected = await browserLogin();
+    if (detected) {
+      await saveAuth('zhipu', detected);
+      console.log(color(`已检测并保存现有 API 凭据到 ${AUTH_FILE}`, C.grn));
+      return;
+    }
+    console.log(color('未检测到本机已有 API Key。', C.yel));
+    console.log(color('请先在浏览器登录智谱开放平台并创建 API Key，然后设置 ZHIPU_API_KEY。', C.gry));
+    console.log(color(`登录入口: ${LOGIN_URL}`, C.gry));
     return;
   }
   if (sub === 'logout') { await deleteAuth('zhipu'); console.log(color('已退出智谱登录。', C.grn)); return; }
-  const key = await getAuth(); console.log(key ? color('zhipu: authenticated', C.grn) : color('zhipu: not authenticated', C.yel));
+  const status = await authStatus();
+  console.log(status.authenticated ? color(`zhipu: authenticated (${status.source})`, C.grn) : color('zhipu: not authenticated', C.yel));
 }
 
 function hiddenInput(prompt) {
@@ -119,7 +126,7 @@ async function readLineInput(prompt, completer) {
 
 async function interactive() {
   const config=await getProjectConfig(cwd0); let model=config.model, thinking=Boolean(config.thinking), cwd=cwd0;
-  let apiKey=await getAuth(); if(!apiKey){console.log(color('未配置 API Key。请先执行: glmcode auth login',C.red));return;}
+  let apiKey=await getAuth(); if(!apiKey){ apiKey=await browserLogin(); if(apiKey) await saveAuth('zhipu', apiKey); } if(!apiKey){console.log(color('未检测到 API Key。请在浏览器登录智谱开放平台后配置 API Key，或设置 ZHIPU_API_KEY。',C.red));return;}
   let skills=await loadSkills(cwd), commands=commandMap(skills), sessionId;
   startPage();
   console.log(color(`提示: 思考模式默认${thinking?'开启':'关闭'}，输入 /thinking ${thinking?'关闭':'开启'}`,C.gry));
@@ -156,10 +163,11 @@ async function interactive() {
 async function main(){
   const [command,...argv]=process.argv.slice(2); const cwd=process.cwd();
   if(!command||command==='chat')return interactive();
-  if(command==='-h'||command==='--help'||command==='help'){console.log(`GLMCode ${VERSION}\n\n用法:\n  glmcode                         启动 GLM 风格交互界面\n  glmcode run <prompt>            执行一次 coding task\n  glmcode auth login|logout       管理智谱 API Key\n  glmcode models                  查看模型\n  glmcode model <id>|free         切换模型\n  glmcode session list|clear <id> 管理会话\n  glmcode skill list              查看技能\n  glmcode plugin list             查看插件\n  glmcode mcp list|add|remove     管理 MCP\n  glmcode config                  查看配置`);return;}
+  if(command==='-h'||command==='--help'||command==='help'){console.log(`GLMCode ${VERSION}\n\n用法:\n  glmcode                         启动 GLM 风格交互界面
+  glm / gc                        快捷启动 GLMCode\n  glmcode run <prompt>            执行一次 coding task\n  glmcode auth login|logout       管理智谱 API Key\n  glmcode models                  查看模型\n  glmcode model <id>|free         切换模型\n  glmcode session list|clear <id> 管理会话\n  glmcode skill list              查看技能\n  glmcode plugin list             查看插件\n  glmcode mcp list|add|remove     管理 MCP\n  glmcode config                  查看配置`);return;}
   if(command==='-v'||command==='--version')return console.log(VERSION);
   const config=await getProjectConfig(cwd);
-  if(command==='run'){const key=await getAuth();return runAgent({cwd,config,apiKey:key,prompt:argv.join(' '),model:config.model});}
+  if(command==='run'){let key=await getAuth();if(!key) key=await browserLogin();if(!key) throw new Error('No Zhipu API key detected. Run: glmcode auth login');return runAgent({cwd,config,apiKey:key,prompt:argv.join(' '),model:config.model});}
   if(command==='auth')return authCmd(argv);if(command==='models')return modelsCmd();if(command==='model')return modelCmd(argv,config,cwd);if(command==='session')return sessionCmd(argv);if(command==='skill')return skillCmd(argv,cwd);if(command==='plugin')return pluginCmd(argv,config,cwd);if(command==='mcp')return mcpCmd(argv,config,cwd);if(command==='config')return console.log(JSON.stringify(config,null,2));
   console.error(`Unknown command: ${command}`);process.exitCode=1;
 }

package/src/config.js

@@ -14,12 +14,14 @@ const defaultConfig = {
   baseUrl: 'https://open.bigmodel.cn/api/paas/v4',
   maxTokens: 8192,
   temperature: 0.2,
-  thinking: 'enabled',
+  thinking: 'disabled',
   approval: 'ask',
   autoCompact: true,
   skillsDirs: ['.glmcode/skills', '~/.glmcode/skills'],
   plugins: [],
-  mcp: {}
+  mcp: {},
+  startupCommand: 'glmcode',
+  autoOpenLogin: true
 };
 
 export async function ensureState() {

package/src/skills.js

@@ -1,11 +1,25 @@
 import fs from 'node:fs/promises';
 import path from 'node:path';
 import { expandHome, exists } from './utils.js';
+import AdmZip from 'adm-zip';
+
+async function extractZipSkills(root) {
+  if (!await exists(root)) return;
+  for (const name of await fs.readdir(root)) {
+    if (!name.toLowerCase().endsWith('.zip')) continue;
+    const zipPath = path.join(root, name);
+    const target = path.join(root, name.slice(0, -4));
+    try {
+      if (!await exists(target)) new AdmZip(zipPath).extractAllTo(target, true);
+    } catch {}
+  }
+}
 
 export async function loadSkills(cwd) {
   const dirs = [path.join(cwd, '.glmcode', 'skills'), path.join(expandHome('~/.glmcode'), 'skills')];
   const skills = [];
   for (const root of dirs) {
+    await extractZipSkills(root);
     if (!await exists(root)) continue;
     for (const name of await fs.readdir(root)) {
       const file = path.join(root, name, 'SKILL.md');